CVE-2025-43421

EPSS 0.04%
Veröffentlicht 04.11.2025 01:17:02
Zuletzt bearbeitet 05.11.2025 15:00:05
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 2 Referenzen 6

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

Diese Information steht angemeldeten Benutzern zur Verfügung.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 26.1

Apple ≫ iPadOS Version < 26.1

Apple ≫ iPhone OS Version < 26.1

Apple ≫ visionOS Version < 26.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.114

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/125632

Vendor Advisory

Release Notes

https://support.apple.com/en-us/125638

Vendor Advisory

Release Notes

https://support.apple.com/en-us/125640

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2025-43421

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-43421

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-43421

EUVD